Enhanced Secure Web-Knocking Using Single Packet Authorization (SPA) and One-Time Password (OTP)

There are times we need to grant access to open ports and services only to<br>certain or authorized users while they are inaccessible or hidden to others. Thus,<br>there is need for an effective authentication system which enables privileged<br>users to secretly knock on closed ports. Web-Knocking, a variation of Port-<br>Knocking (PKn), transmits data through web pages instead of closed ports.<br>Traditional methods of PKn could be subject to sniffing and DoS (Denial of<br>Service) attacks. In this paper, a novel method called Enhanced Secure Web-<br>Knocking (SWKn) is put forward. SWKn shields against sniffers through<br>cryptography and One-Time Password (OTP), parries DoS-Knocking attacks by<br>making the service invisible, and eliminates the client’s need for sophisticated<br>and special applications to knock. This method has been successfully<br>implemented on Router-OS and Linux operating systems.